CVE-2020-16855— Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software.</p> <p>The security update addresses the vulnerability by properly initializing the affected variable.</p>

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

N/A

Microsoft Office 缓冲区错误漏洞

Microsoft Office是美国微软（Microsoft）公司的一款办公软件套件产品。该产品常用组件包括Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office 中存在缓冲区错误漏洞。该漏洞源于软件读取越界内存时。攻击者可利用该漏洞查看溢出内存。以下产品及版本受到影响： Microsoft Office 2016版本， Microsoft Office 2019版本。

N/A

N/A